Description
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a rmagick
Default version status: affected
Red Hat Red Hat 3scale API Management Platform 2
Default version status: unknown
Fedora Fedora
Default version status: affected
References
- https://access.redhat.com/security/cve/CVE-2023-5349 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2247064 ↗
- https://github.com/rmagick/rmagick/issues/1401 ↗
- https://github.com/rmagick/rmagick/pull/1406 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S3XMQ2KWPYGT447EKPENGXXHKAQ5NUWF/ ↗
- https://lists.debian.org/debian-lts-announce/2023/10/msg00030.html ↗
- https://lists.debian.org/debian-lts-announce/2026/01/msg00003.html ↗